> Is there any progress on this bug? I'm unsure what we should be doing on this bug. I think the current description of www-data gives the most factual one: it is the one the webserver will run as, so don't make the content writable by it.
Who else on the system gets write access, seems very environment specific so hard to put in an understandable text, and may be very different depending on if files are modified directly by a shell user, there's a vcs that does automatic updates or there's a cms with a database. Nonetheless, all these scenarios I can handle as long as I remember the undesirability of write access for www-data as described above. Can you make a more concrete proposal of an improvement to the text? Cheers, Thijs
signature.asc
Description: This is a digitally signed message part.
